A great point but I would argue that there might be enough "n" at a company with only, say, 500 employees.
On a different note, I'm not sure the best angle of attack is to bribe anyone. After all someone bribed is also someone who can disclose info. Or could even get hacked themselves whereby someone else would discover that they are cooperating and release or expose that fact. For many reasons. Could be a roommate, an angry spouse or girlfriend etc. And after all a bribe is also money so there is a money trail if large enough and/or not paid in cash. And some people just like to talk and brag.
Secrecy wise, the less people that they were to involve the less chance of a leak. At least one reason that top secret programs have limited people that even know they are going on, right?
The NSA/FBI/DEA can and have used tactics like extortion (e.g. for planted drugs, money laundering charges etc.) to make people cooperate. It's like a bribe just without the risk of exposing.
Would you cite sources for that?
If any of the three-letter agencies (or, for that matter, any big govt agency) uses these kinds of tactic, then there is no reason at all to believe other branches of govt refrain from doing the same shit.
Once, a long time ago, that last sentence would make me a tinfoil-hat-wearer... sad that this is not the case anymore.
They can easily plant their own agents inside the company as employees.
("undercover agent" getting a job at the company like a regular person)
I'd be very very surprised if they already haven't done it.
1., They are willing to sell you intel for money.
2., You can now blackmail them as they accepted a bribe.
Point 2 is the reason you should never accept bribes when doing business, especially abroad and everyone tells you "it's normal". they're just waiting for a foreigner to get exposed, take your passport and have fun with you. see Russia, etc.
No need to be Macchiavelli.
> is to find something they are really really embarrassed about
I don't think NSA needs to employ high school level tactics.
If they want to pin something, they will. True or not.
That's not a bribe.
Learn the difference between strong-arm tactics such as blackmail and bribes. Two completely different approaches.
Patronising dickhead.
Link me to a case where NSA/CIA/FBI blackmailed AND worked with / gave money to an individual at the same time.
The CIA typically recruit through a combination of carrot and stick - i.e. bribery and blackmail.
"Hey dude, let me tell you about this sweet slightly dodgy thing I can get you in on."
... ...
"Oh by the way, I hope you like all that money you made. I work for the CIA. Work with us or go to jail, your call."
More commonly than not it's not about self-preservation, rather protection of loved ones - read up on Operation Mockingbird, which was driven pretty much entirely on this basis - luring journalists in with a subtle bribe hook, then using it to blackmail them.
Did you read anything I posted? In what instance was somebody bribed AND blackmailed at the same time during the Mockingbird?
Please go back to Wikipedia and try again.
Look at Google, Apple or Facebook. There is just sooooo much different attack space. Thousand of servers, thousand of employees that could be bribed, hundreds of third-party people they rely on (Content Delivery, ISPs, Colocations/Datacenters, Hardware suppliers....). A single NSA-controlled computer in your network is a starting point to take over the rest of the network.
/edit: Even if they straight up tell them they have a "bug" in their network, how the hell would they ever find it? I could be a switch, it could be a VoIP phone, it might have been a software-package that was injected with malicious code _while_ downloading, it could be a RaspberryPi camouflaged as some other device, it could be a employees computer, it could be a network-printer, it could be a hijaked VPN account. It could be anything. I just don't see how there is any way to protect yourself against this, even with a dedicated security team and a big budget.